Menu

Articles in this section

See more

Multi-Factor Authentication Verification Mode: Email (Topic)

Multi-Factor Authentication (MFA) is a security-enhancing practice of requiring a person to perform more than one step, beyond email and password, for example, when logging into a system.

A person required to complete MFA triggers it by ...

  • Initiating logging in, by providing a valid email address and password, from a device not remembered for MFA purposes.

  • Initiating a password reset process and then providing a valid email address and password.

  • Clicking a login link on a device not remembered for MFA purposes.

This article will walk through the steps of Email Verification.

Before You Begin

Review the MFA Feature Overview and Settings. If you choose to require admins or non-admins to use MFA, then you must decide which verification mode for them to use; email or authentication app.

Email

  1. The person provides a valid email address and password.
  2. The system emails the person a verification code and displays a code entry screen.
  3. The person enters the verification code.
  4. The system completes login, prompting for a new password if that is what triggered MFA.
  • If the code expires, person clicks "Re-Send Code" link.
  • It is possible for a device to be "remembered" for a period of time, eliminating the need to complete MFA again to complete logging in.

If both email and authenticator modes are enabled, a "Try another way" link is shown.

Example: Body of email sent to the person logging in. Expiration time and help text are from MFA Settings.

Example: Code entry screen. Help text is from MFA Settings.

 

 

 

Related Resources

Related articles